Your rights

Under UK GDPR, you have the following rights:

• Right to be Informed – You have the right to be informed about the collection and use of your personal data
• Right of Access – You have the right to access and receive a copy of your personal data and other supplementary information
• Right to Rectification – You have the right to have inaccurate personal data rectified, or completed if it is incomplete
• Right to Erasure – You have the right to have personal data erased
• Right to restrict processing – You have the right to restriction or suppression of your personal data
• Right to data portability – You can request a copy of data and/or to reuse this data for your own purposes across different services
• Rights relating to automated decision making including profiling – You have specific rights when automated decisions are made about you or you are profiled as part of a service. More information on this right can be sought through the group DPO.

To exercise these rights, contact us using the details provided at the beginning of this Data Privacy Notice or Bilaal@bemortgaged.co.uk

We will respond within 1 calendar month unless the request is particularly complex and then an extension with a maximum time of 3 calendar months, may be requested. You will be informed of any extension or issues in resolving your request.

To access your personal information

You can ask us to confirm whether or not we have and are using your personal data. You can also ask to get a copy of your personal data from us and for information on how we process it.

To rectify or erase your personal information

You can ask that we rectify any information about you which is incorrect. We will be happy to rectify such information but would need to verify the accuracy of the information first.

You can ask that we erase your personal data if you think we no longer need to use it for the purpose we collected it from you.

You can also ask that we erase your personal data if you have either withdrawn your consent to us using your information (if we originally asked for your consent to use your information), or exercised your right to object to further legitimate use of your information, or where we have used it unlawfully or where we are subject to a legal obligation to erase your personal data.

We may not always be able to comply with your request, for example where we need to keep using your personal data in order to comply with our legal obligation or where we need to use your personal data to establish, exercise or defend legal claims.

To restrict or object to how we use your personal information

You can ask that we restrict our use of your personal data in certain circumstances, for example:

where you think the information is inaccurate and we need to verify it;

where our use of your personal data is not lawful but you do not want us to erase it;

where the information is no longer required for the purposes for which it was collected but we need it to establish, exercise or defend legal claims; or

where you have objected to our use of your personal data but we still need to verify if we have overriding grounds to use it.

We can continue to use your personal data following a request for restriction where we have your consent to use it; or we need to use it to establish, exercise or defend legal claims, or we need to use it to protect the rights of another individual or a company.

To request a transfer of personal information

You can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller (e.g. another company).

You may only exercise this right where we use your personal data in order to perform a contract with you, or where we asked for your consent to use your personal data. This right does not apply to any personal data which we hold or process outside automated means.

To withdraw your consent

Subject to certain legal and contractual restrictions and reasonable notice, you may refuse or withdraw consent to the processing of your personal information at any time by contacting us (e.g. direct marketing or cookies). We will advise you if withdrawing your consent may affect our ability to respond to your needs.

Automated decision making and profiling

If we made a decision about you based solely by automated means (i.e. with no human intervention), and the decision made by us produces a legal effect concerning you, or significantly affects you, you may have the right to contest that decision, express your point of view and ask for a human review. These rights do not apply where we are authorised by law to make such decisions and have adopted suitable safeguards in our decision making processes to protect your rights and freedoms.

To obtain a copy of our safety measures for transfers outside of Europe

You can ask for a copy of, or reference to, the safeguards we have put in place when your personal data is transferred outside of the European Economic Area. We are not required to share details of these safeguards where sharing such details would affect our commercial position or create a security risk. [delete if no information is transferred outside of Europe]

Data anonymization and aggregation

Your personal data may be converted into statistical or aggregated data which can’t be used to identify you, then used to produce statistical research and reports.

How to contact us

You can contact us for more information.

If you are not satisfied with the level of information provided in this privacy notice, you can ask us about what personal data we have about you, what we use your information for, who we disclose your information to, whether we transfer it abroad, how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your data from and whether we have carried out any automated decision making using your personal data.

If you would like to exercise any of the above rights, please:

email or write to [our Data Privacy Manager] at Bilaal@bemortgaged.co.uk or 3 Broomfield Crescent, Leicester, LE4 0EN;

let us have enough information to identify you, e.g. name, address, date of birth; let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and let us know the information to which your request relates.

The supervisory authority

We ask that you please attempt to resolve any issues with us before reporting to the ICO

If you are not happy with the way we deal with any complaints or have any further concerns or complaints, you have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioners Office (ICO), who can be contacted through their website at https://ico.org.uk/global/contact-us or by writing to:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF